AI
Product
AION
by HCL · last CVE May 14, 2026
32
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 11Medium 14Low 4
Watch

Add AION to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-52642
6.5
0%
Mar 16
HCL AION is affected by an internal filesystem paths disloser vulnerability
Affected: 2.0
CVE-2025-52623
6.5
0%
Feb 3
HCL AION is affected by an Autocomplete HTML Attribute Not Disabled for Password Field vulnerability
Affected: 2.0
CVE-2025-52629
6.1
0%
Feb 3
HCL AION is susceptible to Missing Content-Security-Policy
Affected: 2.0
CVE-2025-52624
6.1
0%
Oct 10
HCL AION is susceptible to Bypass of the script allow list configuration vulnerability
Affected: 2.0
CVE-2025-62313
5.4
0%
May 14
HCL AION is affected by a vulnerability where adequate protections against brute-force attempts are not enforced.
Affected: 2.1.0
CVE-2025-62310
5.4
0%
May 14
HCL AION is affected by a vulnerability where encryption is not enforced for certain data transmissions or operations
Affected: 2.1.0
CVE-2025-52641
5.3
0%
Apr 15
Internal Filesystem Exploration vulnerability
Affected: 2.0
CVE-2025-52646
5.3
0%
Mar 16
HCL AION is affected by a vulnerability where certain offering configurations may permit execution of potentially harmful SQL queries.
Affected: 2.0
CVE-2025-52645
5.3
0%
Mar 16
HCL AION is affected by a vulnerability where model packaging and distribution mechanisms may not include sufficient authenticity verification.
Affected: 2.0
CVE-2025-52649
5.3
0%
Mar 16
HCL AION is affected by a vulnerability where certain identifiers may be predictable in nature
Affected: 2.0
CVE-2025-52633
5.3
0%
Feb 3
HCL AION is susceptible to Missing Content-Security-Policy
Affected: 2.0
CVE-2025-62305
5.1
0%
May 14
HCL AION is affected by a vulnerability where certain operations may trigger out-of-band interactions
Affected: 2.1.0
CVE-2025-62308
5.1
0%
May 14
HCL AION is affected by a vulnerability where sensitive backend infrastructure details may be exposed
Affected: 2.1.0
CVE-2025-62311
4.3
0%
May 14
HCL AION is affected by a vulnerability where backend service details may be transmitted over insecure HTTP channels.
Affected: 2.1.0
Showing 14